Your passwords are probably not as safe as you think.
Most password managers encrypt your data — but hold the keys. Nodus Vault does not. Everything is encrypted on your device before it leaves it. Not even we can read your passwords.
The threat is real — and it is accelerating.
AI has made it trivially easy to craft convincing phishing attacks at scale. And when companies holding your data get breached, your passwords are only safe if no one — not even the storage provider — can decrypt them.
surge in phishing attacks since AI tools became widely available
Zscaler ThreatLabz 2024
is all it takes to launch a targeted AI phishing campaign (vs. 16 hours manually)
IBM Security X-Force
increase in phishing volume in the second half of 2024 alone
Egress Threat Intelligence
Basic-Fit members had personal and bank account details exposed in April 2026
NOS / Basic-Fit
April 2026 — Booking.com: Names, email addresses, phone numbers, home addresses, full booking details and account PINs were exposed in a large-scale data breach affecting millions of customers across Europe and beyond. Booking.com reset PINs and notified affected users.
April 2026 — Basic-Fit: Approximately 1 million gym members across 6 countries had personal details and bank account information compromised. Data was reportedly put up for sale on underground forums.
"Zero-knowledge" is a claim. For most managers, it does not hold up.
Researchers at ETH Zurich published a formal cryptographic analysis of the three most widely used password managers. They found a combined 27 distinct attack paths — all routes by which a compromised server could expose your plaintext passwords, despite the managers' zero-knowledge marketing claims.
Read the full paper at iacr.orgAttack paths found per manager
Server never holds decryption keys
What zero-knowledge actually means
It is not a marketing phrase. It is a cryptographic guarantee with a precise meaning.
Traditional password manager
You give the manager a locked box and your key. They use your key to open the box, copy the contents into their own locked room, then give you back a copy of your key. Their room can be broken into. Their copy of your key can be stolen.
Nodus Vault — zero-knowledge
You lock the box on your device with your own key — a key derived from your master password using Argon2id, which never leaves your machine. We only ever receive the locked box. We do not have your key. We physically cannot open it.
What happens when you save a password
You type
Password entered on your device
Key derived
Argon2id derives encryption key from your master password — locally
Encrypted
AES-256-GCM encrypts the entry on your device
Transmitted
Only the encrypted blob leaves your device
Stored
Server stores ciphertext it cannot read
Decryption only happens when you open your vault — on your device, with your key.
Three layers between you and any breach
Even if an attacker gets through one layer, the next one stops them.
Encrypted database
The entire vault database is encrypted at rest. No raw tables, no plaintext storage. An attacker who copies the database file gets nothing legible.
Vault key
Each vault is protected by its own key, derived from your master password using Argon2id — a memory-hard algorithm that makes brute-force attacks computationally infeasible.
Per-secret encryption
Every individual credential is encrypted with its own key. Compromising one entry reveals nothing about any other. AES-256-GCM with unique IVs per entry.
One vault. All your devices.
Autofill in your browser. Unlock on your phone. Manage from your desktop. Everything in sync — encrypted end-to-end.
macOS + Windows
Desktop app
Full-featured desktop app. Manage your vault, generate strong passwords, copy credentials instantly. Works offline — no internet needed to access your passwords.
Chrome + Firefox
Browser extension
Autofill usernames and passwords directly into any website form. Save new credentials from the browser in one click. Works without leaving your current tab.
iOS
Mobile app · Android coming
Access your vault on the go. Biometric unlock, password generator, and seamless sync with your desktop vault. Android support is in development.
Simple, transparent pricing
Free forever for personal use. Upgrade when you need sync or sharing.
Nodus Vault
- Unlimited passwords
- macOS, Windows, iOS apps
- Chrome & Firefox extension
- Autofill in any browser
- AES-256-GCM encryption
- Local-first, works offline
Nodus Vault
14-day free trial, then €3/month
- Everything in Free
- Encrypted cloud sync across all devices
- Secure sharing with individuals
- Priority support
- Early access to new features
Nodus Vault
14-day free trial, then €2/user/month
- Everything in Pro
- Shared team vaults
- Role-based access control
- Centralized admin dashboard
- Audit logs
- SSO-ready
Start with a vault they cannot crack.
Free forever for personal use. No credit card. No master-password recovery (which is the point — if we could recover it, so could an attacker).